Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.6The cp utility in uutils coreutils fails to properly handle setuid and setgid bits when ownership preservation fails.Check if you run itEPSS 0.13%Apr 22, 2026
- High7.7A vulnerability in the rm utility of uutils coreutils allows a bypass of the --preserve-root protection.Check if you run itEPSS 0.18%Apr 22, 2026
- Medium5.5The sort utility in uutils coreutils is vulnerable to a process panic when using the --files0-from option with inputs containing non-UTF-8 filenames.Check if you run itEPSS 0.13%Apr 22, 2026
- Medium4.4The comm utility in uutils coreutils incorrectly consumes data from non-regular file inputs before performing comparison operations.Check if you run itEPSS 0.14%Apr 22, 2026
- Low3.3The comm utility in uutils coreutils silently corrupts data by performing lossy UTF-8 conversion on all output lines.Check if you run itEPSS 0.18%Apr 22, 2026
- Medium5.3A vulnerability in the tail utility of uutils coreutils allows for the exfiltration of sensitive file contents when using the --follow=name option.Check if you run itEPSS 0.10%Apr 22, 2026
- Low3.3The dd utility in uutils coreutils suppresses errors during file truncation operations by unconditionally calling Result::ok() on truncation attempts.Check if you run itEPSS 0.11%Apr 22, 2026
- Low3.3The cut utility in uutils coreutils incorrectly handles the -s (only-delimited) option when a newline character is specified as the delimiter.Check if you run itEPSS 0.14%Apr 22, 2026
- Low3.3The mktemp utility in uutils coreutils fails to properly handle an empty TMPDIR environment variable.Check if you run itEPSS 0.13%Apr 22, 2026
- High7.1A vulnerability in uutils coreutils mkfifo allows for the unauthorized modification of permissions on existing files.Check if you run itEPSS 0.17%Apr 22, 2026
- Medium5.5A flaw in the ChownExecutor used by uutils coreutils chown and chgrp causes the utilities to return an incorrect exit code during recursive operations.Check if you run itEPSS 0.14%Apr 22, 2026
- Medium5.5The recursive mode (-R) of the chmod utility in uutils coreutils incorrectly handles exit codes when processing multiple files.Check if you run itEPSS 0.14%Apr 22, 2026
- High7.3A vulnerability in the chmod utility of uutils coreutils allows users to bypass the --preserve-root safety mechanism.Check if you run itEPSS 0.18%Apr 22, 2026
- Critical9.1DDEV is an open-source tool for running local web development environments for PHP and Node.js.Check if you run itEPSS 0.42%Apr 22, 2026
- Medium6.1A reflected cross-site scripting (XSS) vulnerability in the AdvancedSearch functionality of Silverpeas Core before version 6.4.6 allows attackers to execute arbitrary…Check if you run itEPSS 0.19%Apr 22, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Avada allows Cross Site Request Forgery.This issue affects Avada: from n/a before 7.13.2.Check if you run itEPSS 0.10%Apr 22, 2026
- Medium5.1Carbon Forum 5.9.0 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious JavaScript code through the Fo…Check if you run itEPSS 0.20%Apr 22, 2026
- Critical9.3ELBA5 5.8.0 contains a remote code execution vulnerability that allows attackers to obtain database credentials and execute arbitrary commands with SYSTEM level permissions.Check if you run itEPSS 0.42%Apr 22, 2026
- Medium6.9Textpad 8.1.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long buffer string through th…Check if you run itEPSS 0.18%Apr 22, 2026
- Critical9.3ThinkPHP ThinkPHP Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 0.89%Apr 22, 2026
- Medium5.1ICEWARP 10.3.4 and 11.0.0.0 contains a cross-site scripting vulnerability that allows attackers to inject malicious HTML elements into emails by embedding base64-encod…Check if you run itEPSS 0.23%Apr 22, 2026
- High8.6LanSpy 2.0.1.159 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying oversized input to the scan field.Check if you run itEPSS 0.20%Apr 22, 2026
- Medium6.9UltraISO 9.7.1.3519 contains a local buffer overflow vulnerability in the Output FileName field of the Make CD/DVD Image dialog that allows attackers to overwrite SEH…Check if you run itEPSS 0.18%Apr 22, 2026
- Medium6.9Angry IP Scanner 3.5.3 contains a buffer overflow vulnerability in the preferences dialog that allows local attackers to crash the application by supplying an excessiv…Check if you run itEPSS 0.18%Apr 22, 2026
- High8.6LanSpy 2.0.1.159 contains a local buffer overflow vulnerability in the scan section that allows local attackers to execute arbitrary code by exploiting structured exce…Check if you run itEPSS 0.21%Apr 22, 2026
Sort